Lucene search

K
archlinuxArch LinuxASA-201601-26
HistoryJan 25, 2016 - 12:00 a.m.

linux-lts: privilege escalation

2016-01-2500:00:00
Arch Linux
lists.archlinux.org
35

0.0004 Low

EPSS

Percentile

0.4%

It was reported that possible use-after-free vulnerability in keyring
facility, possibly leading to local privilege escalation, was found.
Function join_session_keyring in security/keys/process_keys.c holds a
reference to the requested keyring, but if that keyring is the same as
the one being currently used by the process, the kernel wouldnโ€™t
decrease keyring->usage before returning to userspace. The usage field
can be possibly overflowed causing use-after-free on the keyring object.

OSVersionArchitecturePackageVersionFilename
anyanyanylinux-lts<ย 4.1.16-1UNKNOWN